Privacy Policy

Last updated: February 22, 2026

Roch&Val operates this website and store. For the purposes of applicable data protection laws, including the General Data Protection Regulation (GDPR), we act as the data controller of your personal information.

1. Data Controller

Legal Name: Brahim Mgouni
Business Name: Roch&Val
Business Type: Sole Proprietor
Registered Address:
34 Résidence des Chataigniers
45800 Saint-Jean-de-Braye
France

Email: support@rochandval.com
SIRET: 882 312 176

2. Personal Data We Collect

We may collect and process the following categories of personal data:

• Contact details (name, billing and shipping address, email, phone number)

• Order and transaction details

• Payment information (processed securely via payment providers)

• Account data (if applicable)

• Communication data (customer service inquiries)

• Device and usage data (IP address, browser, interaction data)

3. Legal Basis for Processing (Art. 6 GDPR)

We process your personal data on the following legal grounds:

• Art. 6(1)(b) GDPR – Contract performance
  To process and fulfill your orders, manage payments, shipping, and returns.

• Art. 6(1)(c) GDPR – Legal obligation
  To comply with tax, accounting, and regulatory obligations.

• Art. 6(1)(f) GDPR – Legitimate interests
  For fraud prevention, website security, and business improvement.

• Art. 6(1)(a) GDPR – Consent
  For marketing communications and non-essential cookies.

You may withdraw consent at any time.

4. Cookies & Tracking Technologies

We use cookies and similar technologies to:

• Enable essential website functionality

• Improve performance and user experience

• Analyze website traffic

• Provide marketing and advertising services (where consent is given)

Non-essential cookies are only activated after your explicit consent via our cookie banner.

You may withdraw or modify your consent at any time via the cookie settings tool on our website.

5. Data Retention

We retain personal data only as long as necessary:

• Order and invoice data: up to 10 years (legal obligation under French tax law)

• Customer communication: up to 3 years

• Marketing data: until consent is withdrawn

• Analytics data: according to provider retention settings

After these periods, data is securely deleted or anonymized.

6. Data Sharing

We may share data with:

• Shopify (hosting & ecommerce platform)

• Payment providers (PayPal, Shopify Payments, etc.)

• Shipping partners

• IT and technical service providers

• Marketing tools (where consent applies)

All processors act under GDPR-compliant agreements.

7. International Transfers

If personal data is transferred outside the European Economic Area, we rely on:

• European Commission Standard Contractual Clauses

• Adequacy decisions

• Other legally recognized safeguards

8. Your Rights Under GDPR

If you reside in the EU or EEA, you have the right to:

• Access your personal data

• Rectify inaccurate data

• Request deletion

• Restrict processing

• Data portability

• Object to processing

• Withdraw consent

• Lodge a complaint with your local data protection authority

To exercise your rights, contact:
support@rochandval.com

9. Security

We implement appropriate technical and organizational security measures to protect your personal data. However, no transmission over the internet can be guaranteed as completely secure.

10. Changes to This Policy

We may update this Privacy Policy to reflect legal or operational changes. The updated version will be published on this page with a revised date.